137 matches found
blue-pigeon
Blue Pigeon: Bluetooth-based Data Exfiltration and Proxy Tool for Red Teamers 1. The Motivation | Birth of the Bird How does Blue Pigeon work? The Pigeon's Key Requirements 2. The Components | Dissecting the Pidgey apart 1. Blue Pigeon - The Mobile Applicaton 2. Blue Beak - Custom...
pigeon
Pigeon Your agent spawned a sub-agent and handed it the same API key. That sub-agent can now deploy to production, read the payments database, and merge to main. Pigeon stops that. You hand the child a Pigeon Pass : a narrowed, signed credential for what it may do, not a copy of everything you ca...
CVE-2026-104383
Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection...
CVE-2026-104383 Code injection in EagleCloud Aquila on-premises version
Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection...
CVE-2026-104383
The EagleCloud Aquila on-premises version (versions through 2.6.7.2 ) contains a code injection vulnerability in the Pigeon MFA service . This flaw, identified as CWE-94 , occurs due to the Improper Control of Generation of Code , which allows authenticated remote attackers to execute arbitrary c...
EUVD-2026-111587
Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection...
CVE-2026-104383: EagleCloud Aquila: Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on…
Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection...
EagleCloud Aquila code injection vulnerability
EagleCloud Aquila versions 2.6.7.2 and earlier contain a code injection vulnerability. This vulnerability stems from improper control over code generation in the Pigeon MFA service, potentially allowing authenticated remote attackers to execute arbitrary code via code injection...
PT-2026-127808
Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquila versions through 2.6.7.2 on on-premises platforms allows authenticated remote attackers to execute arbitrary code via code injection...
Malicious code in involved-amethyst-pigeon (npm)
Source: amazon-inspector fc184b63fe725240edae92c06b75e82b34d273e905edcb0272e0eb47c7ebd110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in integrated-magenta-pigeon (npm)
--- Credit: OpenSSF source...
Malicious code in head-scarlet-pigeon (npm)
Source: amazon-inspector bd1630ce5f871b68f8a07f00de0d731644765a008c85ec02b6c598e561d89827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in due-tomato-pigeon (npm)
Source: amazon-inspector 088f12a6a35ab79d22a4ac2c29f8757c1d28d13d70f39b78f38019de4fd2c584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in condemned-scarlet-pigeon (npm)
Source: amazon-inspector aa0c8e41367691b56d04f64fd693b90ef3839f60653516f5cae1fc0a1af3a564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in concrete-lavender-pigeon (npm)
Source: amazon-inspector 2e94e24198b0873c9a263633a821d6f2003f2eebcf73ba5e8ad65dc1c7c8f8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
osf-pigeon (0.0.2) potentially affected by CVE-2025-58438 via internetarchive (1.9.4)
internetarchive PYPI version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on internetarchive and may be impacted: - osf-pigeon 0.0.2 Source cves: CVE-2025-58438 Source advisory: OSV:PYSEC-2026-357...
CVE-2026-32616
Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $SERVER'HTTPHOST' without validation to construct email verification URLs in the register and resendmail flows. An attacker can manipulate the Host header in the HTTP request, causing the verification lin...
CVE-2026-32616
Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $SERVER'HTTPHOST' without validation to construct email verification URLs in the register and resendmail flows. An attacker can manipulate the Host header in the HTTP request, causing the verification lin...
CVE-2026-32616: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $SERVER'HTTPHOST' without validation to construct email verification URLs in the register and resendmail flows. An attacker can manipulate the Host header in the HTTP request, causing the verification lin...
Pigeon injection vulnerability
Pigeon is a lightweight bulletin board/notepad/social system/blog developed by Akkariin Meiko as an individual project. Versions of Pigeon prior to 1.0.201 contained a injection vulnerability. This vulnerability stemmed from the application’s use of unvalidated $SERVERHTTPHOST in the email...